[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: XSA-351 causing Solaris-11 systems to panic during boot.


  • To: Cheyenne Wills <cheyenne.wills@xxxxxxxxx>
  • From: Roger Pau Monné <roger.pau@xxxxxxxxxx>
  • Date: Tue, 17 Nov 2020 13:54:07 +0100
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=citrix.com; dmarc=pass action=none header.from=citrix.com; dkim=pass header.d=citrix.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=XNScQ2lP2jTT3efRphi/9RIgLG8rE7pQrMcbEcbruwg=; b=AQNdR8Im0DFfmuKcRGAJRdIqDZPITKonmEetnScTSodO+U/AiNkvI0MeZ+jcr8UhdsBvsblNRTLZp5ewCAwgLFHljOEn53AcIhrY6seDAtjMHhqb8QIcixpA8CQYp9A1PL1cu4YpcVtV0gJmPrESWC5yXEZtKbwiqgehaZx/Tf9Ti/utVJZY12DYuWkpBrQi/QuExlUl7Yr0aEbXJwKb8fT+J6DHuEDpTkr/SN/A+gYMxG3ZvBazdSrgKxjUPlW+smGjEfM1erQl9sH8BTtIYzy+u1tOWeXjZbhIniw7VbBfmTEsU2taJGmk1hPFccwAIyk858i0J91jJwGvsaYHMg==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=jVGVw5rzG5/iPT/WVvu7u/3wIIGQN4UeOYWwE2cXhD3wGzB4CMYa/yYyWDIvkWbNkb2RkLKKyeZeMXmYbvDg2swyBQtdysh7RYSc5hdk+4J+YSwpgGiW1MlKIeQC8xH9P0Hj125U+4akn5Ex2FRPPw1OctbZFHCc2VVjUFBXNLh5R/H2PWbCfag+3/e8wOkFL2+7LUACfiO5Cvy9BOIUfrMtWj5d4PRI4Ct71nZMe+fzfyuovdKaqlnTQt9GDz2GRLKgHtofuy0Pe4PBNVgb9w+834OZ3QOpVcgfFyRh7i9e0KbuJJGgNlYOqNv784+7JHDpbCxcpcwowiQuKklQXA==
  • Authentication-results: esa1.hc3370-68.iphmx.com; dkim=pass (signature verified) header.i=@citrix.onmicrosoft.com
  • Cc: <xen-devel@xxxxxxxxxxxxxxxxxxxx>
  • Delivery-date: Tue, 17 Nov 2020 12:54:36 +0000
  • Ironport-sdr: nrE2r5EcEtkkLXj95gMh3Hdq/LWZn42m+5pF0IIpTYyB3PE9i0JX5HuzYUN9PPXXtCkOEPwalf 2IjIcJFm+5h1RIdYD08YodmWRxIz4wc6rSx/+eo+7kZ83vr/8X4cXN4c8mWdiZHQG+ia8KnAwX fG5yHcswe0tb5oB4UXjtCcTQtZ2DvEhtKEPAL58kMwBSXscgJNItrP6laFOAnINkuDb4vRk7D/ RLCEMwyg+RnLy7amJUSDhY5aeoELresKHc30uIiq4LJxYTK/szR2hCNsEtEn6EiZHcHbo7a9Cb bco=
  • List-id: Xen developer discussion <xen-devel.lists.xenproject.org>

On Tue, Nov 17, 2020 at 11:50:39AM +0100, Roger Pau Monné wrote:
> On Mon, Nov 16, 2020 at 02:57:14PM -0700, Cheyenne Wills wrote:
> > Running Xen with XSA-351 is causing Solaris 11 systems to panic during
> > boot.  The panic screen is showing the failure to be coming from
> > "unix:rdmsr".  The panic occurs with existing guests (booting off a disk)
> > and the  booting from an install ISO image.
> > 
> > I discussed the problem with "andyhhp__" in the "#xen" IRC channel and he
> > requested that I report it here.
> > 
> > This was failing on a Xen 4.13 and a Xen 4.14 system built via gentoo.
> > 
> > I understand that ultimately this is a bug in Solaris.  However it does
> > impact existing guests that were functional before applying the XSA-351
> > security patches.
> 
> I seem to have some issues getting the Solaris 11.4 ISO to boot, which I
> think are unrelated to the MSR changes. I get what seems to be a panic
> just after the Copyright message, but there's no reason printed at all
> about the panic. The message just reads (transcript):
> 
> SunOS Release 5.11 Version 11.4.0.15.0 64-bit
> Copyright (c) 1983, 2018, Oracle and/or it's affiliates. All right reserved.
> System would not fast reboot because:
>  newkernel not valid
>  fastreboot_onpanic is not set
>  ...
> 
> The config file I'm using is:
> 
> memory=1024
> vcpus=4
> name="solaris"
> 
> builder="hvm"
> 
> disk = [
>   
> 'format=raw,vdev=hdc,access=ro,devtype=cdrom,target=/root/sol-11_4-text-x86.iso',
>   'format=raw,vdev=hda,access=rw,target=/root/solaris.img',
> ]
> 
> vif = [
>  'mac=00:16:3E:74:3d:88,bridge=bridge0',
> ]
> 
> vnc=1
> vnclisten="0.0.0.0"
> 
> serial='pty'
> 
> on_crash="preserve"
> 
> Is there anything I'm missing?

OK, it seems like Solaris requires more than 1GB of memory in order to
boot. I've increased it to 4GB and I've been able to boot successfully
up to the installer.

I'm however able to boot up to the installer screen without any
crashes, so I guess the version I'm using (11.4.0.15.0) is already
fixed?

Can you paste which version of Solaris you are using and if possible
where I can find the installer media to reproduce?

Thanks, Roger.



 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.